Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in mvv9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newhackgit1778555882 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in metatestmyprfolx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in modified_bayes (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-features-groups (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-features-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-registrymetadata-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-kredz-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in metatesttgukcriv (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-snippy-snippy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-github-repositories (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-features-featureflaghub (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-merge-queue-go-mergequeuemonolith (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pullsd-teams (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-spokesd-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-scribe-scribe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pullsd-authorization (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-examples-octocat (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in modgovexf573845 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-codingagentintegrations-codingagentintegrations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-octoshift-migrations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-reposinsights-reposinsights (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-modelsgateway-telemetry (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pipelinemonitor-monitoring (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-mailreplies-replies (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in metatestfpepbeeo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pullsd-repositories (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-features-featuresync (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-octoshift-imports (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-loops-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-partitioning-pull_requests (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pullsd-pullrequestinfo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in microsoft_kiota_http (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-copilot-registry (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in melio-platform-api-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-features-actors (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-git_src_migrator-monolith (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-notifications-notifyd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in metatesteyuhnqlw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-pullsd-users (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-packageregistry-auditlog (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-proxima-enterprisemanagement (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-modelsgateway-access (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-odometer-core (RubyGems)
1 compromised version
Page 59 of 158